LENOVO BIOS AUTO-PATCHER for Supervisor Password Removal

[spink90]

This may not be super relevant, but it happened while unlocking BIOS using clip.
Resistors next to the BIOS (33 ohms).
I'm attaching a snippet of the schematic with the resistor code.
It might be useful to someone.
These are SMD resistors 0201 or 0402 33R1J(33Ohm 5%).

0201 - ~0.6mm long.
0402 - ~1mm long - they are a bit too big, but they can be soldered.

Symptom is that the laptop is unresponsive.
After applying power (with the BIOS and laptop batteries disconnected), the power button (white LED in the button) blinks three times.

[Stefan Steff]

I can't find the chip I'm supposed to flash, not sure what I'm looking for. Could you send photos or any more details? Also, do I have to desolder an entire BGA chip to do this?

OK, You asked for
Here are the details:

The chip you are looking for is U23 (MEC1653) and you don't need to desolder the chip !
Look on the first picture and find all soldering points for JTAG on your MB.
The second picture is how to connect these points to your programmer. ( don't wire #RST )
After connecting and checking all wires start your programmer software and select MEC1653 from EC List, connect the charger and read the chip it should be 290kb.
Erase the chip and write the File back.
Swap back the R8796 to R8797 position before restart !
You will lose your laptop's data such as serial number, model, etc. like:
2200: Machine Type Invalid and Serial Number are invalid.
2201: Machine UUID is Invalid
2202: Product Name is invalid
2203: System configuration is invalid.
2204: System configuration data is invalid.
Don't worry that can be restored from the sticker (I hope is intact...if not then ..."Houston, We have a problem").
Use ThinkPad Config Information Update Utility v1.11 (attached) :
-Extract and run "usbfmtpw.exe" this will format your USB and copy the files over.
(check that the files copied after format. if not manually copy them to the root of the USB).
-Insert to laptop and boot to USB FDD it is EFI not Legacy (USB you just created).
-Now go to main menu and choose initialize EEPROM, this clears all keys plus UUID and now the overflow error wont happen.
-Now go 1, then use 1 to add new info, enter C0 then Enter.
-Now enter serial and model in long form will start with 1S so (1STTTTMMMMCCSSSSSSS like described below)
-Enter and Key is stored.
-If you like can add more or go back and use option 3 for a few more config details. (I set my brand name there)
-Once all info is set go to assign UUID, and say Yes.
(once you generate the UUID you cannot edit the serials unless you initialize and do them all over again.
-Reboot and check bios screen your info should be there no more beeps on boot.

Product ID: TTTT-MMMMCC
Serial#: SS-SSSSS

TTTT = Machine Type
MMMM = Model Type
CC = Country Code
SSSSSSS = Serial Number

...so yours will be 1S20HGS14D00PC0PTLL4

As a final advice before you try to flash your MEC1653:
Check and re-check every component around the BIOS chip and try to rewrite your saved dump with the new programmer because is far,far better then the CH341A.

Good Luck!

[ofluffy]

I think RT809H is the best price/value in this category...in fact every programmer has good and bad things but to use it once or twice a year then RT809H is a good choice.
In US you find a lot of RT809H programmers on Amazon or eBay. (ex. https://a.co/d/eUE6vcB)
Look for RT809H not for RT809F !

I can't find the chip I'm supposed to flash, not sure what I'm looking for. Could you send photos or any more details? Also, do I have to desolder an entire BGA chip to do this?

[ELOGS]

Hi Good day I really need help I have a Lenovo V110 -15IKB and every time I enter BIOS I get a password and I don't know if it can be removed or reset as I just bought the laptop , I don't really understand anything here from page 1 so a step by step guide will be much appreciated. V110 -15IKB

[Markus1741]

Hey, can you generate for me the bios file for bypass bios password

i already upload the informations P52S
Thank you

https://www.badcaps.net/forum/troubl...49#post3716449

Try this files good luck ...

[aminsab]

Hey, can you generate for me the bios file for bypass bios password

i already upload the informations P52S
Thank you

https://www.badcaps.net/forum/troubl...49#post3716449

[Markus1741]

Thank you, that one worked(R90T1L30)
I flashed the same BIOS to the second one(R90T1L2P), but unfortunately, the white LED on the power button still only flashes three times, and that's it.

It's possible that this resistor is necessary.

Hello Oh yes, the resistance is necessary.

[spink90]

Hello you can try this file good luck ....

Thank you, that one worked(R90T1L30)
I flashed the same BIOS to the second one(R90T1L2P), but unfortunately, the white LED on the power button still only flashes three times, and that's it.

It's possible that this resistor is necessary.

[Markus1741]

I pulled out second computer, identical to the one I tried before.
I repeated the entire procedure.
Patched BIOS booted, and I went through the process.
I desoldered the chip and soldered the same chip from where the previously readed BIOS(2nd lenovo X1 3rd gen).
As a result, both computers are dead – they won't boot, the fan won't spin, and the monitor won't backlight.
I used lenovo_autopatcher_0.2.

Laptop Lenovo X1 Yoga 3rd GEN
Type: 20LES3FQ0X
Serial: R90T1L30

Hello you can try this file good luck ....

[spink90]

I pulled out second computer, identical to the one I tried before.
I repeated the entire procedure.
Patched BIOS booted, and I went through the process.
I desoldered the chip and soldered the same chip from where the previously readed BIOS(2nd lenovo X1 3rd gen).
As a result, both computers are dead – they won't boot, the fan won't spin, and the monitor won't backlight.
I used lenovo_autopatcher_0.2.

Laptop Lenovo X1 Yoga 3rd GEN
Type: 20LES3FQ0X
Serial: R90T1L30

[spink90]

I compared this motherboard with same motherboard, and it turns out I'd probably ripped out one resistor (33 ohms) from the R2105 slot with clip.
This might be why the computer isn't waking up?

[spink90]

After flashing the patched BIOS (which worked yesterday it prompted me to enter the password (1234), then the hardware ID(enter), space 2 times, and then to turn off the machine, as instructed).
Today I only get the power button to illuminate three times on white (a non-repeating sequence).
I tested it with the BIOS/laptop battery disconnected - no change.

[spink90]

@hoaca388
After uploading your file, the laptop reacts as follows:
Keyboard LEDs (FNLock/ESC) light up - LEDs light up for a moment (after connecting the charger - the BIOS battery and the laptop battery are disconnected).
White LED next to the charging port lights up.
Fan doesn't spin.
Screen is black (no backlight).

[Karol]

Hi, this file boots the PC.

I follow this procedure, but I get stuck at step 5.
When the hardware ID appears, whatever I do is invalid password.

I can't proceed.

STEP 1: Flash and replace current BIOS with the P50_Bios_2_PATCHED.bin file
STEP 2: Boot the machine
STEP 3: Press ENTER/F1/etc. to enter BIOS settings
STEP 4: Enter any character when asked for Supervisor Password
STEP 5: Press enter when it shows Hardware ID
STEP 6: Press space bar 2x when asked
STEP 7: Turn off machine
STEP 8: Restore original P50_Bios_1.bin BIOS content
STEP 9: Reset BIOS settings to factory default


I tried restoring my original file, but the password isn't removed.

The HARDWARE ID changes with every boot.

Post the hardware ID and wait for the key.

Maxpower3 Don't make free accusations

[spink90]

Try again with Autopatcher.

I'm asking just to be sure.
Should I desolder the chip, clean it(erase), check if it's empty(blank check), and then upload(write) bios from you on this chip, then solder it again?
Thank you for taking the time to respond.

[hoaca388]

Hello!
I used autopatcher, rewrote the patched file in the bios, but as a result, when I press the power button, nothing happens.
I performed the first part (uploading patched bios and passing through empty fields, pressing the spacebar twice, etc.) using a clip.
While clearing memory before uploading the original batch, clip started failing (applications were freezing – neoprogrammer, asprogrammer, etc.).
So I desoldered the chip, cleaned it, uploaded the batch from the backup, and then verified it (I've attached a photo).
Unfortunately, the laptop wouldn't boot.
Only reaction is red LED (the one next to charging port) lighting up after connecting charger to any USB-C charging port.
Can someone help?

Laptop Lenovo X1 Yoga 3rd GEN
Type 20LE-SFO0X
Serial R9-0T1L2P

Original bios, backup bios, patched bios:

Try again with Autopatcher.

[spink90]

Hello!
I used autopatcher, rewrote the patched file in the bios, but as a result, when I press the power button, nothing happens.
I performed the first part (uploading patched bios and passing through empty fields, pressing the spacebar twice, etc.) using a clip.
While clearing memory before uploading the original batch, clip started failing (applications were freezing – neoprogrammer, asprogrammer, etc.).
So I desoldered the chip, cleaned it, uploaded the batch from the backup, and then verified it (I've attached a photo).
Unfortunately, the laptop wouldn't boot.
Only reaction is red LED (the one next to charging port) lighting up after connecting charger to any USB-C charging port.
Can someone help?

Laptop Lenovo X1 Yoga 3rd GEN
Type 20LE-SFO0X
Serial R9-0T1L2P

Original bios, backup bios, patched bios:

[Maxpower3]

Hi, this file boots the PC.

I follow this procedure, but I get stuck at step 5.
When the hardware ID appears, whatever I do is invalid password.

I can't proceed.

STEP 1: Flash and replace current BIOS with the P50_Bios_2_PATCHED.bin file
STEP 2: Boot the machine
STEP 3: Press ENTER/F1/etc. to enter BIOS settings
STEP 4: Enter any character when asked for Supervisor Password
STEP 5: Press enter when it shows Hardware ID
STEP 6: Press space bar 2x when asked
STEP 7: Turn off machine
STEP 8: Restore original P50_Bios_1.bin BIOS content
STEP 9: Reset BIOS settings to factory default


I tried restoring my original file, but the password isn't removed.

The HARDWARE ID changes with every boot.

try with nokey


Karol no solution selling here.

[Sidqi Januar Riadi]

Try this.

thank you very much brother, it works for me.🤗🤗🤗

[mariusdumi]

Test this second version if you still need , let me know.

Hi, this file boots the PC.

I follow this procedure, but I get stuck at step 5.
When the hardware ID appears, whatever I do is invalid password.

I can't proceed.

STEP 1: Flash and replace current BIOS with the P50_Bios_2_PATCHED.bin file
STEP 2: Boot the machine
STEP 3: Press ENTER/F1/etc. to enter BIOS settings
STEP 4: Enter any character when asked for Supervisor Password
STEP 5: Press enter when it shows Hardware ID
STEP 6: Press space bar 2x when asked
STEP 7: Turn off machine
STEP 8: Restore original P50_Bios_1.bin BIOS content
STEP 9: Reset BIOS settings to factory default


I tried restoring my original file, but the password isn't removed.

The HARDWARE ID changes with every boot.